Bug 1278771 - invalid filename is used in file context pattern for pegasus configuration file
Summary: invalid filename is used in file context pattern for pegasus configuration file
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: selinux-policy
Version: 6.7
Hardware: All
OS: Linux
low
low
Target Milestone: rc
: ---
Assignee: Miroslav Grepl
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-11-06 11:39 UTC by Milos Malik
Modified: 2016-05-10 20:02 UTC (History)
7 users (show)

Fixed In Version: selinux-policy-3.7.19-282.el6
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 1278777 (view as bug list)
Environment:
Last Closed: 2016-05-10 20:02:28 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2016:0763 0 normal SHIPPED_LIVE selinux-policy bug fix update 2016-05-10 22:33:46 UTC

Description Milos Malik 2015-11-06 11:39:59 UTC
Description of problem:
# semanage fcontext -l | grep /etc/Pegasus
/etc/Pegasus(/.*)?                                 all files          system_u:object_r:pegasus_conf_t:s0 
/etc/Pegasus/pegasus_current\.conf                 all files          system_u:object_r:pegasus_data_t:s0 
#

But the service does not create / use any file called pegasus_current.conf. The service creates / uses a file called cimserver_current.conf.

Version-Release number of selected component (if applicable):
selinux-policy-3.7.19-281.el6.noarch
selinux-policy-doc-3.7.19-281.el6.noarch
selinux-policy-minimum-3.7.19-281.el6.noarch
selinux-policy-mls-3.7.19-281.el6.noarch
selinux-policy-targeted-3.7.19-281.el6.noarch
tog-pegasus-2.12.0-3.el6_4.x86_64
tog-pegasus-libs-2.12.0-3.el6_4.x86_64

How reproducible:
always

Steps to Reproduce:
# service tog-pegasus start
Starting up CIM server:                                    [  OK  ]
# service tog-pegasus status
CIM server (11285) is running
# service tog-pegasus stop
Shutting down CIM server:                                  [  OK  ]
# restorecon -Rv /etc/Pegasus/
restorecon reset /etc/Pegasus/cimserver_current.conf context unconfined_u:object_r:pegasus_data_t:s0->unconfined_u:object_r:pegasus_conf_t:s0
# restorecon -Rv /etc/Pegasus/
# 

Actual results:
 * the file context pattern contains an invalid filename

Expected results:
 * the file context pattern contains a correct filename

Comment 1 Miroslav Grepl 2015-11-09 14:58:55 UTC
Milos,
I see it also on RHEL-7. Can you confirm it?

Comment 2 Milos Malik 2015-11-09 16:25:17 UTC
Yes, that was the reason for filing BZ#1278777.

Comment 8 errata-xmlrpc 2016-05-10 20:02:28 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-0763.html


Note You need to log in before you can comment on or make changes to this bug.